Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/992343B25DA711F19BA9F3EECE1D38B0.roa
File: 992343B25DA711F19BA9F3EECE1D38B0.roa (raw, json)
Hash identifier: 3/KtLiZRgrfoANmdK5FQ++Jj+WcvjDNankurR8ZKtRk=
Subject key identifier: CA:E3:E5:51:EF:05:CD:21:E1:C6:42:B9:2F:4A:A3:E7:AC:A6:43:96
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 18C5
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/992343B25DA711F19BA9F3EECE1D38B0.roa
Signing time: Mon 01 Jun 2026 10:49:44 +0000
ROA not before: Mon 01 Jun 2026 10:49:39 +0000
ROA not after: Thu 01 Jun 2028 10:49:39 +0000
asID: 984
IP address blocks: 102.129.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 03 Jun 2026 00:07:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6341 (0x18c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 1 10:49:39 2026 GMT
Not After : Jun 1 10:49:39 2028 GMT
Subject: CN=6a1d63c8-4b86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9b:b8:72:67:49:f5:9b:bd:c8:22:99:d1:12:
ea:19:c9:22:49:5b:52:38:8d:b9:82:a2:05:7d:19:
71:4b:08:05:17:57:f7:a1:70:89:8c:42:20:22:64:
2d:39:ee:2c:60:6b:3a:c9:b4:b3:07:c2:0e:18:f8:
9d:09:ce:95:dd:36:79:2e:71:b5:63:00:7c:05:f7:
f1:70:96:ef:1e:26:e6:8f:c7:a8:92:69:05:ff:ad:
9a:2e:af:52:b6:61:28:42:7e:91:05:c4:d7:b6:5d:
eb:80:1e:24:d8:18:83:7a:39:5c:8a:0d:80:0b:20:
18:87:e3:ab:fa:43:d7:cf:84:5f:b0:47:0c:99:c8:
f9:bb:30:3b:04:9c:05:dc:16:b9:de:46:ba:33:81:
0a:14:45:c2:6b:a4:b9:1c:93:4e:ec:ec:4d:01:4a:
52:e6:f8:ab:09:0b:cf:a9:20:61:b6:2f:98:a6:7f:
18:2c:4a:99:7e:f3:4b:07:c7:11:6b:cd:88:50:4d:
d8:5f:2b:7e:2a:ec:ba:d9:2f:52:3d:b9:b8:76:71:
c7:19:95:f5:45:30:1f:67:bc:b0:c3:2e:6f:8f:41:
10:b2:48:79:41:0a:3a:bd:ed:c6:4d:1c:28:db:c0:
8c:94:ff:a6:fe:b0:38:02:7c:f3:b9:7c:30:fb:e0:
4d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E3:E5:51:EF:05:CD:21:E1:C6:42:B9:2F:4A:A3:E7:AC:A6:43:96
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/992343B25DA711F19BA9F3EECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.139.0/24
Signature Algorithm: sha256WithRSAEncryption
08:42:7f:ed:aa:da:27:08:15:26:03:eb:72:a1:0d:ee:2d:f9:
76:1d:81:73:5d:03:c7:ca:cd:9f:0c:36:2f:46:c0:91:9c:a1:
16:cf:b3:4b:ff:2f:27:c6:24:91:61:6d:f5:28:20:68:18:48:
02:aa:53:9c:33:76:44:b8:6a:06:ec:e5:18:c4:ed:c8:f0:55:
cf:86:10:39:81:06:9a:b6:b3:33:ad:62:94:ce:05:5b:8a:21:
eb:3d:38:a8:d1:68:a7:b8:9e:e2:a8:7f:d8:0f:c8:da:52:50:
25:31:92:cc:db:06:5e:8e:a5:0a:66:2b:fe:70:fe:2d:b3:e7:
f8:09:b0:8e:4d:8d:d5:91:7f:ab:2b:24:dd:35:db:41:0a:b2:
17:19:e9:98:e1:1e:e5:a3:ef:b4:7a:de:0f:d5:f7:b1:38:d4:
bf:60:11:1f:d8:30:d2:f4:33:13:ff:3b:9f:d9:5a:01:9b:44:
26:5f:20:1c:40:b5:2c:90:b1:44:0d:b9:6a:da:e3:82:b3:53:
df:46:71:f9:4a:e2:aa:55:bb:f5:dc:f9:3b:42:4a:ad:da:6a:
23:d5:96:c1:1c:50:64:1e:99:fa:54:39:6d:02:9e:b7:7c:dc:
a3:a8:9d:77:13:99:13:d5:ca:ed:73:e4:b2:60:91:27:b6:be:
04:c3:48:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 1 23:44:37 2026 by rpki-client